CVE-2020-15095 @ Npm-npm-3.10.10 #398
Description
Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about CVE-2020-15095
Checkmarx Project: cx-boris-goman/AutoPR
Repository URL: https://github.com/cx-boris-goman/AutoPR
Branch: kid
Scan ID: bfaa74de-6358-4edb-a528-1d669bc0863c
Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like "://[[:]@][:][:][/]". The password value is not redacted and is printed to stdout and also to any generated log files.
Additional Info
Attack vector: LOCAL
Attack complexity: HIGH
Confidentiality impact: HIGH
Availability impact: NONE
Remediation Upgrade Recommendation: 6.14.6